diff --git a/kickstart/veilor-os.ks b/kickstart/veilor-os.ks index 581b4ab..18f8749 100644 --- a/kickstart/veilor-os.ks +++ b/kickstart/veilor-os.ks @@ -51,7 +51,7 @@ user --name=admin --groups=wheel --gecos="veilor admin" --password="" --plaintex # Note: init_on_alloc/init_on_free removed from default live cmdline — # they zero every memory page at boot which 5x'd KVM live boot time. # Re-enable per-install via veilor-firstboot.service for production. -bootloader --location=mbr --append="lockdown=integrity slab_nomerge randomize_kstack_offset=on vsyscall=none" +bootloader --location=mbr --append="lockdown=integrity slab_nomerge randomize_kstack_offset=on vsyscall=none plymouth.enable=0" # ── Live ISO partitioning (flat — for live rootfs build only) ── # NOTE: This is the *live* image kickstart. Final installed system uses diff --git a/overlay/usr/local/bin/veilor-installer b/overlay/usr/local/bin/veilor-installer index 3417620..743948f 100644 --- a/overlay/usr/local/bin/veilor-installer +++ b/overlay/usr/local/bin/veilor-installer @@ -377,7 +377,7 @@ __SSHKEY_DIRECTIVE__ # Full hardening cmdline (installed system, not live): # --location=none: anaconda auto-places bootloader (UEFI grub2-efi or BIOS). -bootloader --append="lockdown=integrity slab_nomerge init_on_alloc=1 init_on_free=1 randomize_kstack_offset=on vsyscall=none" +bootloader --append="lockdown=integrity slab_nomerge init_on_alloc=1 init_on_free=1 randomize_kstack_offset=on vsyscall=none plymouth.enable=0" # Disk: zero, LUKS2 (argon2id), btrfs subvolumes (no LVM intermediary). # Native btrfs-on-LUKS matches Fedora KDE Spin defaults; LVM+btrfs combo